Fix WFLY-1758: move unauthorised access to model window